Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20323032303336.roa
File:                     3131342e3139392e38372e302f32342d3234203d3e20323032303336.roa (raw, json)
Hash identifier:          EuUY5ws1T8QzBQaewzXN6GzgjgX182D5u2A3LnK/AGs=
Subject key identifier:   2F:1C:DA:A9:86:44:DD:78:94:F7:F2:F1:40:6D:C7:A7:43:64:99:2F
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       46866EF5CEFC1973BF573E9B6B07ED92FEC9B8C8
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20323032303336.roa
Signing time:             Mon 31 Aug 2026 10:47:29 +0000
ROA not before:           Mon 31 Aug 2026 10:42:29 +0000
ROA not after:            Mon 30 Aug 2027 10:47:29 +0000
asID:                     202036
IP address blocks:        114.199.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 09:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:86:6e:f5:ce:fc:19:73:bf:57:3e:9b:6b:07:ed:92:fe:c9:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: Aug 31 10:42:29 2026 GMT
            Not After : Aug 30 10:47:29 2027 GMT
        Subject: CN=2F1CDAA98644DD7894F7F2F1406DC7A74364992F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:52:e1:8b:20:0a:3c:f9:0d:49:13:ad:cc:
                    2d:c1:2c:44:38:0b:14:61:3f:02:f3:ee:53:f5:f5:
                    13:30:28:05:07:f6:3a:65:f2:ab:25:6e:98:c7:72:
                    7f:20:8a:30:bf:2e:e2:43:e3:68:fb:b6:ae:a6:ec:
                    b7:81:c2:f3:16:01:98:fa:ad:de:df:ed:19:6c:d5:
                    2b:cf:47:a2:fb:37:3a:14:1d:82:cf:7d:9b:39:c1:
                    37:f8:45:b8:9e:bc:48:9a:5d:11:db:b3:28:65:d4:
                    a0:43:f1:26:d8:46:a7:e6:b5:0f:d3:1b:f6:76:70:
                    52:20:35:a1:33:3f:2d:a0:50:36:4b:87:03:7e:46:
                    8b:c2:05:e8:ac:7c:5b:7c:e3:ea:02:96:c2:bd:19:
                    a9:53:e9:20:98:7f:6f:34:42:00:8d:dd:46:16:0d:
                    7b:b7:13:2b:7e:c2:69:00:3c:03:6b:ff:9d:1f:4f:
                    69:23:a5:c3:5f:13:7f:dd:97:aa:c6:d9:31:f7:55:
                    3d:52:74:c6:ac:f5:fb:71:03:ef:7c:81:0b:ba:9b:
                    4b:cd:28:3f:59:17:10:12:1d:ca:21:d8:95:bc:49:
                    a4:b1:1e:1f:71:f4:68:19:be:f3:6c:73:85:9e:13:
                    e7:a2:26:2e:78:98:ad:70:32:06:78:c2:ec:dc:ca:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:DA:A9:86:44:DD:78:94:F7:F2:F1:40:6D:C7:A7:43:64:99:2F
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20323032303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:77:82:7e:19:81:99:1f:06:dd:40:2f:15:da:f8:21:bc:
         18:56:b9:58:84:da:a5:42:55:52:21:d0:2f:58:a7:35:cb:83:
         22:37:38:af:76:26:dd:ee:76:52:2b:d5:dd:20:91:a5:1e:7e:
         bf:36:33:d8:2b:c3:da:8b:31:ea:e7:b8:c7:d0:11:ea:69:dc:
         b2:2f:98:60:4b:f2:ae:4b:d6:25:f4:10:94:3b:37:96:5b:af:
         15:37:76:3d:c9:c0:26:39:74:0e:22:ea:fe:b5:6b:99:27:eb:
         48:4f:7f:29:55:f0:8a:be:9f:52:c2:56:dd:c7:cf:b0:68:d3:
         8c:60:29:ba:99:04:f3:21:01:2a:74:c6:c3:09:a9:ec:e4:4d:
         9d:7b:8a:61:53:17:f1:f6:ca:e0:dc:8f:17:2b:0c:51:4b:24:
         35:3f:4c:7b:5e:31:aa:7d:aa:ce:54:4c:9d:46:e6:0e:31:0e:
         a7:4e:24:cb:70:d0:83:e3:91:1e:a5:b5:e6:3c:b8:67:31:62:
         4f:7c:ee:04:a6:20:c3:94:67:45:69:1f:a7:c2:e4:3c:2d:fb:
         6b:cb:bc:bf:e5:bb:e2:10:f2:64:27:86:b7:f4:79:a2:06:1c:
         1b:83:5a:94:58:f2:4b:8e:82:7f:aa:bb:19:e3:1e:11:1b:3c:
         91:ad:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:20:44 2026 by rpki-client